New option no-ssl3-method which removes SSLv3_*method

[openssl.git] / apps / ca.c

diff --git a/apps/ca.c b/apps/ca.c
index 934970d9e45e9742972e8ff263c5c317cd25bdb1..89f0de35683008c83463753b3ba70e4161b8ad67 100644 (file)
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1628,12 +1628,14 @@ static int certify(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
                {
                ok=0;
                BIO_printf(bio_err,"Signature verification problems....\n");
+               ERR_print_errors(bio_err);
                goto err;
                }
        if (i == 0)
                {
                ok=0;
                BIO_printf(bio_err,"Signature did not match the certificate request\n");
+               ERR_print_errors(bio_err);
                goto err;
                }
        else
@@ -2800,6 +2802,9 @@ char *make_revocation_str(int rev_type, char *rev_arg)
 
        revtm = X509_gmtime_adj(NULL, 0);
 
+       if (!revtm)
+               return NULL;
+
        i = revtm->length + 1;
 
        if (reason) i += strlen(reason) + 1;